CVE-2005-4364

Published: Dec 20, 2005Modified: Apr 16, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in index.cfm in Hot Banana Web Content Management Suite 5.3 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.

Affected (1)

Products: Hot Banana: Web Content Management Suite

Hot Banana

1 product

Web Content Management Suite

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Hot Banana Web Content Management Suite	Version 5.3

References (10)

http://pridels0.blogspot.com/2005/12/hot-banana-xss-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/18126

Source: cve@mitre.org

PatchVendor Advisory

http://www.osvdb.org/21786

Source: cve@mitre.org

http://www.securityfocus.com/bid/15948

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2992

Source: cve@mitre.org

http://pridels0.blogspot.com/2005/12/hot-banana-xss-vuln.html